CVE-2025-40285
Published Dec 6, 2025
Modified Apr 15, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible refcount leak in smb2_sess_setup() Reference count of ksmbd_session will leak when session need reconnect. Fix this by adding the missing ksmbd_user_session_put().
Is your site exposed to CVE-2025-40285?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/379510a815cb2e64eb0a379cb62295d6ade65df0
https://git.kernel.org/stable/c/6fc935f798d44a8eb8a5e6659198399fbf57b981
https://git.kernel.org/stable/c/d37b2c81c83d6c0d5ca582f4fe73c672983f9e0d
https://git.kernel.org/stable/c/dcc51dfe6ff26b52cac106865a172ac982d78401
https://git.kernel.org/stable/c/e671f9bb97805771380c98de944e2ceab6949188
Frequently Asked Questions
What is CVE-2025-40285? +
In the Linux kernel, the following vulnerability has been resolved:
smb/server: fix possible refcount leak in smb2_sess_setup()
Reference count of ksmbd_session will leak when session need reconnect.
Fix this by adding the missing ksmbd_user_session_put().
How do I check if I'm vulnerable to CVE-2025-40285? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.